HP StorageWorks Fabric OS 5.X Advanced Web Tools Administrator Guide (AA-RVHYB-TE, September 2005)

Fabric OS 5.x Advanced Web Tools administrator guide 21
Logging in
When you use Advanced Web Tools, you must log in before you can modify any switch information. This
section describes upfront login, which determines when you log in, and role-based access control, which
is determined by how you log in.
Prior to displaying the login window, Advanced Web Tools displays a security banner (if one is
configured for your switch), which you must accept before logging in. The security banner is displayed
every time you log in, regardless of whether upfront login is enabled.
Upfront login
Depending on how your switch is configured, you are either prompted to log in once, when you launch
Advanced Web Tools (upfront login), or you are prompted to log in whenever you launch a switch
administration module, such as the Switch Admin or Zoning module.
By default, upfront login is disabled. Use the configure telnet command to enable or disable upfront
login. See the HP StorageWorks Fabric OS 5.x command reference guide for information.
Table 4 lists different behaviors, depending on whether upfront login is enabled.
Table 4 Comparison of login modes
Upfront login enabled Upfront login not enabled
You must log in before you see the Switch Explorer
(shown in Figure 2 on page 20).
Switch Explorer launches with no login.
A single session is shared by the Switch Explorer
and all child windows launched from it. (See
”Session management” on page 22 for more
information on sessions.)
Switch Admin, Zone Admin, and other protected
modules require separate login. (These modules
are described in subsequent chapters.)
Role-based access control is enforced across the
entire session. (See Role-based access control next,
for more information.)
Role-based access control is enforced on a
per-module basis.
When you log out or close Switch Explorer, all
windows belonging to the session are invalided.
(See ”Logging out” on page 22 for more
information.)
There is no Logout button in Switch Explorer.
Closing the Switch Explorer window does not
invalidate other windows that were opened from it.
If you refresh the Switch Explorer window, all
windows belonging to the session are invalidated.
Refreshing the Switch Explorer window does not
affect other windows that were opened from it.
Inactivity timeout (two hours) invalidates the Switch
Explorer and all windows opened from it.
Inactivity timeout applies only to protected
modules, and each module has its own session.
This means that if the Switch Admin module times
out, the Zone Admin module could still be left
open. Conversely, recent activity in the Switch
Admin module does not prevent the Zone Admin
module from timing out if there is no activity in that
module.